SA
Product
ServiceNow AI Platform
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 3Medium 3Low 0
Watch
Add ServiceNow AI Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74820 | 10.0 | Aug 27 | Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause Affected: before Xanadu Patch 11 Hot Fix 7a; before Yokohama Patch 12 Hot Fix 3b; before Yokohama Patch 13 Hot Fix 4; before Zurich Patch 7b Hot Fix 3; before Zurich Patch 8 Hot Fix 5; before Zurich Patch 9 Hot Fix 6; +9 more |
| CVE-2026-18886 | 10.0 | Aug 27 | Unauthenticated Privilege Escalation via System Configuration Image Upload Processor Affected: before Xanadu Patch 11 Hot Fix 7a; before Yokohama Patch 12 Hot Fix 3b; before Yokohama Patch 13 Hot Fix 4; before Zurich Patch 7b Hot Fix 3; before Zurich Patch 8 Hot Fix 5; before Zurich Patch 9 Hot Fix 6; +9 more |
| CVE-2026-18885 | 10.0 | Aug 27 | Unauthenticated Remote Code Execution in GraphQL Composite Data API Affected: before Xanadu Patch 11 Hot Fix 7a; before Yokohama Patch 12 Hot Fix 3b; before Yokohama Patch 13 Hot Fix 4; before Zurich Patch 7b Hot Fix 3; before Zurich Patch 8 Hot Fix 5; before Zurich Patch 9 Hot Fix 6; +9 more |
| CVE-2026-6876 | 10.0 | Aug 27 | Sandbox Escape in ServiceNow AI Platform Affected: before Xanadu Patch 11 Hot Fix 7a; before Yokohama Patch 12 Hot Fix 3b; before Yokohama Patch 13 Hot Fix 4; before Zurich Patch 7b Hot Fix 3; before Zurich Patch 8 Hot Fix 5; before Zurich Patch 9 Hot Fix 6; +9 more |
| CVE-2026-6875 | 9.5 | Jul 13 | Sandbox Escape in ServiceNow AI Platform Affected: before Australia Patch 2; before Yokohama Patch 12 Hot Fix 1b; before Yokohama Patch 13; before Zurich Patch 7b; before Zurich Patch 9; before Brazil EA; +1 more |
| CVE-2026-86860 | 9.3 | Sep 24 | Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform Affected: before Yokohama Patch 13 Hot Fix 5a; before Zurich Patch 10 Hot Fix 3b; before Zurich Patch 10 Hot Fix 4a W32; before Zurich Patch 11 Hot Fix 3; before Australia Patch 2 Hot Fix 4b W32; before Australia Patch 4 Hot Fix 3; +1 more |
| CVE-2026-13016 | 9.3 | Sep 24 | Unauthenticated SQL Injection in ServiceNow AI Platform Affected: before Yokohama Patch 13 Hot Fix 5a; before Zurich Patch 10 Hot Fix 3b; before Zurich Patch 10 Hot Fix 4a W32; before Zurich Patch 11 Hot Fix 3; before Australia Patch 2 Hot Fix 4b W32; before Australia Patch 4 Hot Fix 3; +1 more |
| CVE-2026-0542 | 9.2 | Feb 25 | Remote Code Execution in ServiceNow AI Platform Affected: before Australia; before Zurich Patch 5; before Zurich Patch 4 Hot Fix 3b; before Yokohama Patch 12; before Yokohama Patch 10 Hot Fix 1b; before Xanadu Patch 11 Hot Fix 1a |
Showing 8